I've installed the renewed SSL certificate on cdsldap0 and reverted the workaround implemented yesterday on opsws0-10.  LIGO.ORG logins should now work on all the CDS workstations that are configured for it.